Legal
Privacy Policy
1. Who we are
This website is operated by Scandinavian Travel Services ehf (SSN: 680513-1550), trading as Landmannalaugar Tours, Laugavegur 5, 101 Reykjavík, Iceland. Contact: info@landmannalaugartours.com · +354 497 12 16.
We are the data controller for personal data collected through landmannalaugartours.com.
2. What data we collect
We collect personal data in the following situations:
- Tour bookings — name, email, phone number, number of participants, and payment details processed by our booking partner TourDesk.
- Contact form — name, email address, and message content.
- Newsletter signup — email address and marketing consent.
- Website analytics — anonymised usage data collected via Google Analytics 4 and Microsoft Clarity, if you have consented.
- Cookies — see our Cookie Policy for full details.
3. Legal basis for processing
We process your data under the following legal bases (GDPR Article 6):
- Contract performance — to process your booking and provide the services you purchased.
- Legitimate interests — to respond to enquiries, improve our website, and prevent fraud.
- Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
- Legal obligation — where required by Icelandic or EU law (e.g. invoicing, accounting records).
4. How we use your data
- To confirm and fulfil your tour booking
- To communicate with you about your booking or enquiry
- To send marketing newsletters (with your consent only)
- To improve our website and services
- To comply with legal and regulatory requirements
5. Who we share data with
We do not sell your personal data. We share data only with trusted third-party processors:
- TourDesk (tourdesk.is) — booking and payment processing
- Google Analytics / Google LLC — website analytics (EEA Standard Contractual Clauses in place)
- Microsoft Clarity — session recording analytics (with consent)
- Cloudinary — image hosting and delivery (CDN)
6. International transfers
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
7. How long we keep data
- Booking data: 7 years (statutory accounting obligation under Icelandic law)
- Contact form enquiries: 2 years from last contact
- Newsletter subscribers: until you unsubscribe
- Analytics data: 26 months (Google Analytics default)
8. Your rights
Under GDPR, you have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any right, email info@landmannalaugartours.com. We will respond within 30 days.
You may also lodge a complaint with the Icelandic Data Protection Authority: personuvernd.is.
9. Security
We implement appropriate technical and organisational measures to protect your personal data. Our website uses HTTPS (TLS) for all data in transit.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects any changes.
11. Contact
Scandinavian Travel Services ehf
Laugavegur 5, 101 Reykjavík, Iceland
info@landmannalaugartours.com · +354 497 12 16